Paz.2560
Details
Paz.2560.a
It is not a dangerous memory resident encrypted multipartite virus. While executing an infected file the virus affects the MBR of the hard drive. Then it hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed or opened. The virus does not infect the files COMMAND.COM and SCAN.EXE. It deletes the anti-virus databases CHKLIST.*. Depending on the system time it also hooks INT 15h and disables Keyboard Intercept (AH=4Fh) function.
The virus contains the text:
PAZ, por favor.
Related Posts